Vulnerability Bulletins |
IBM Security Bulletin: Multiple vulnerabilities, including Freak and Bar Mitzvah, in IBM Java SDK affect IBM i. |
|
| Affected software | IBM |
|
There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM i. The “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability and the RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM i java. CVE(s): CVE-2015-0491, CVE-2015-0459, CVE-2015-0469, CVE-2015-0458, CVE-2015-0480, CVE-2015-0488, CVE-2015-0486,CVE-2015-0478, CVE-2015-0477, CVE-2015-0204, CVE-2015-0192, CVE-2015-2808, CVE-2015-1916, More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_including_freak_and_bar_mitzvah_in_ibm_java_sdk_affect_ibm_i?lang=en_us |
|